Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32C2862A135911F1A68FAEEADAE4EC9C.roa
File: 32C2862A135911F1A68FAEEADAE4EC9C.roa (raw, json)
Hash identifier: c6qt9bP3P3j0l4JYJrXgpfI3fWu/tRlhxObI2Zx4Mek=
Subject key identifier: 63:89:C7:B7:AE:E5:8B:8A:F5:0B:4A:AF:5B:0E:47:CB:AB:FD:4E:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32C2862A135911F1A68FAEEADAE4EC9C.roa
Signing time: Thu 26 Feb 2026 21:22:05 +0000
ROA not before: Thu 26 Feb 2026 21:22:00 +0000
ROA not after: Thu 26 Mar 2026 21:22:00 +0000
asID: 401783
IP address blocks: 156.230.160.0/24 maxlen: 24
156.254.117.0/24 maxlen: 24
156.254.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106739 (0x1a0f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 21:22:00 2026 GMT
Not After : Mar 26 21:22:00 2026 GMT
Subject: CN=69a0b97d-aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:d0:fb:0c:e9:34:08:f3:24:70:d1:a1:2d:
d6:7d:98:14:4d:ed:f4:fc:ac:84:2c:4e:d7:9b:ca:
67:0d:4f:8f:e8:4a:0b:1f:a0:e5:02:5d:ca:a4:b2:
33:02:c3:20:44:41:0a:0c:2d:9a:81:9d:29:60:17:
b5:e3:a1:7b:21:e2:ed:80:22:85:7a:ad:7a:47:b0:
19:5b:2a:73:b2:d7:6a:3e:38:8c:c8:5d:05:65:fb:
4b:e4:0e:fb:44:7e:98:cd:62:23:5b:82:e8:2d:21:
03:82:8c:7c:eb:c7:08:20:7b:fd:5c:03:6b:67:ff:
08:61:37:6b:7e:5c:68:5b:29:bd:4f:ba:d4:7e:72:
21:ec:fc:69:7d:d9:ef:63:71:6b:59:bd:3a:cb:c4:
1a:ac:c6:00:fa:2e:9f:40:b3:20:2f:34:ef:bd:30:
b7:8a:cd:22:43:95:08:c1:93:63:7f:99:6d:59:ba:
27:be:be:ed:1a:1c:dd:2d:0f:98:5e:c1:1a:4f:43:
cc:91:51:af:87:27:fa:3d:9c:39:ea:37:dc:ac:1d:
f4:08:85:48:8c:cf:59:e2:b6:56:d6:3e:dc:80:06:
e0:68:29:87:78:be:ca:49:d2:7b:40:c9:e0:7a:34:
45:ee:b6:16:f5:32:31:b1:35:99:d4:39:4a:dd:ac:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:C7:B7:AE:E5:8B:8A:F5:0B:4A:AF:5B:0E:47:CB:AB:FD:4E:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32C2862A135911F1A68FAEEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.160.0/24
156.254.117.0-156.254.119.255
Signature Algorithm: sha256WithRSAEncryption
21:8a:96:33:39:c8:45:d9:ea:01:e2:7f:60:fe:4c:42:a7:b8:
f0:bd:c8:09:1b:3a:8f:d1:7f:77:08:37:3c:5f:be:2f:c3:01:
5e:dc:91:2c:8d:14:43:d9:26:85:d9:88:be:b3:7a:9d:a2:16:
17:5b:bb:0e:70:ce:c4:9b:da:f0:e7:cb:67:b6:a8:1d:62:ba:
c9:c8:a1:7f:35:2a:b7:6c:a8:29:96:db:da:ec:cc:7b:fb:fe:
19:e2:02:92:d7:35:65:b7:56:68:52:c3:c8:6f:8a:b7:e5:af:
a4:4d:ef:d3:4a:14:e6:b7:d0:2b:25:e1:f8:fb:36:d6:3c:55:
2a:af:a4:5a:db:e5:e7:3f:d8:b8:06:88:3a:9d:23:f0:a4:67:
c1:63:b6:84:bb:1a:26:d4:85:33:fe:9e:4e:a0:6a:dd:ba:5d:
ce:00:a7:68:2f:71:d7:22:83:a2:d3:35:45:96:0a:48:19:a4:
16:b7:6f:44:fd:6e:67:b6:03:be:da:a2:6e:be:db:d1:9c:fb:
38:73:cb:52:4e:16:75:44:2c:e6:a4:30:d7:ea:a0:e2:9e:dd:
06:98:9f:dd:92:12:43:a1:d7:6d:d5:cc:f9:ec:10:44:6d:79:
37:62:24:ee:44:5c:13:5b:88:28:33:9b:04:ad:34:00:1d:1a:
6f:23:c2:c0
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAaDzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI2MjEyMjAwWhcNMjYwMzI2MjEyMjAwWjAYMRYw
FAYDVQQDEw02OWEwYjk3ZC1hZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzZnQ+wzpNAjzJHDRoS3WfZgUTe30/KyELE7Xm8pnDU+P6EoLH6DlAl3K
pLIzAsMgREEKDC2agZ0pYBe146F7IeLtgCKFeq16R7AZWypzstdqPjiMyF0FZftL
5A77RH6YzWIjW4LoLSEDgox868cIIHv9XANrZ/8IYTdrflxoWym9T7rUfnIh7Pxp
fdnvY3FrWb06y8QarMYA+i6fQLMgLzTvvTC3is0iQ5UIwZNjf5ltWbonvr7tGhzd
LQ+YXsEaT0PMkVGvhyf6PZw56jfcrB30CIVIjM9Z4rZW1j7cgAbgaCmHeL7KSdJ7
QMngejRF7rYW9TIxsTWZ1DlK3ay91wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGOJ
x7eu5YuK9QtKr1sOR8ur/U7dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMkMyODYyQTEzNTkxMUYxQTY4RkFFRUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnOagMAwDBACc/nUDBAOc/nAw
DQYJKoZIhvcNAQELBQADggEBACGKljM5yEXZ6gHif2D+TEKnuPC9yAkbOo/Rf3cI
Nzxfvi/DAV7ckSyNFEPZJoXZiL6zep2iFhdbuw5wzsSb2vDny2e2qB1iusnIoX81
KrdsqCmW29rszHv7/hniApLXNWW3VmhSw8hvirflr6RN79NKFOa30Csl4fj7NtY8
VSqvpFrb5ec/2LgGiDqdI/CkZ8FjtoS7GibUhTP+nk6gat26Xc4Ap2gvcdcig6LT
NUWWCkgZpBa3b0T9bme2A77aom6+29Gc+zhzy1JOFnVELOakMNfqoOKe3QaYn92S
EkOh123VzPnsEERteTdiJO5EXBNbiCgzmwStNAAdGm8jwsA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:34 2026 by rpki-client